Is an eSIM safe to use?
Yes, and in two important ways it is safer than the plastic card it replaces. Here is what the security actually rests on, what a provider can and cannot see, and the handful of risks worth knowing.
An eSIM is at least as secure as a physical SIM. The profile is encrypted and tied to your phone's hardware, it cannot be pulled out of a stolen phone and put into another, and your home SIM stays in place so your number is never exposed. The real risks are the same as for any SIM: a weak account password, a phishing email pretending to be your carrier, and a phone without a screen lock.
Where the security comes from
A SIM's job is to prove to the network that you are you. On a plastic card the secret key that does this sits on the card and travels with it. On an eSIM the key is written into a chip soldered to the phone's board during a download that is encrypted end to end between the provider's server and that chip. The standard is set by the GSMA, the same body that governs the carriers themselves, and every phone maker and eSIM provider has to certify against it. Three things follow:
- The profile cannot be copied. A QR code installs once. Scanning it again on a second phone fails, because the server has already released that profile to the first chip.
- The profile cannot be removed and reused. There is no card to take out of a stolen phone and put into another to receive your calls and codes.
- Deleting is clean. Remove the eSIM from your settings and the profile is gone from the chip. Nothing is left in a drawer.
Safer than a physical SIM in two ways
SIM swap fraud
The most damaging phone attack of the last decade is SIM swapping: a criminal persuades your carrier's shop or call centre to move your number to a SIM they control, then receives your bank's verification codes. A travel eSIM does not carry your home number, so it cannot be used for this. And because your home SIM never leaves the phone while you travel, you are not handing a kiosk your passport and number details to get a local card.
Theft
If a phone with a physical SIM is stolen and the screen is unlocked or the SIM has no PIN, the thief can drop the card into another phone and receive your SMS codes. With an eSIM there is nothing to drop out. The profile is locked to the phone, and the phone is locked to your face or passcode.
What a travel eSIM provider can see
This is the part people ask about most quietly. The honest answer:
| Information | Visible to ETravelSim? | Why |
|---|---|---|
| Your name, email and payment | Yes | Needed to issue the plan and send the QR code. Payment is handled by the card processor; we do not store card numbers. |
| Which country the eSIM connected in and how much data it used | Yes, as totals | Needed to run the plan and show your balance. This is the same information any carrier has. |
| Your phone's EID | Yes, once installed | Identifies the chip the profile was delivered to, so we can reissue it if you delete it. |
| Which websites you visit or apps you use | No | Traffic is encrypted by the sites and apps themselves (the padlock in your browser). The network carries it without reading it. Use a VPN if you want the network to not see even the destination domains. |
| Your messages, calls or photos | No | WhatsApp, iMessage and the like are end to end encrypted. Your home SIM handles your calls, not the eSIM. |
| Your exact location | No | The network knows roughly which cell tower a phone is on, as every network does. We do not receive or store tower level location. |
Our privacy policy sets this out formally, including how long order records are kept.
If your phone is lost or stolen abroad
-
Lock it remotely
Find My (iPhone) or Find My Device (Android) from any browser. Mark as lost. The eSIM keeps working for the device's own location reporting, which is one small advantage of still having data on it.
-
Call your home carrier about the home SIM
Ask them to suspend the physical SIM so nobody can move it. This is the SIM that matters for bank codes.
-
Tell us, if you like
We can suspend the eSIM plan on request. In practice it is low risk: it carries no number, and a thief gets a few days of data at most before the plan ends.
-
On the new phone
Message support with your order number and we issue a new QR code for the remaining plan. The old profile is dead the moment the new one installs.
The risks that are real
None of these are specific to eSIMs, but an honest page should list them.
- Phishing. Emails or texts pretending to be your carrier or an eSIM provider asking you to "re-verify" and scan a code. We send one QR per order, from our own domain, and never ask you to scan anything by text message. If in doubt, log into your account and look there.
- Weak account security. Your ETravelSim account holds your QR codes. Use a password you do not use elsewhere. The account is where a reissued QR goes, so protect it like your email.
- No screen lock. With no passcode, anyone holding your phone has your apps, eSIM or not. Face ID or a six digit code closes most of the gap.
- Public Wi-Fi. Not an eSIM risk, the reverse: having your own data means you can skip the airport Wi-Fi that asks for your email and watches your traffic.
- Buying from a reseller you cannot verify. Marketplaces sell QR codes of unclear origin that may be revoked or already used. Buy from the provider's own site or app.
Good habits for travel
- Set a SIM PIN on your home physical SIM (Settings, Cellular, SIM PIN on iPhone). It stops the card being used in another phone.
- Turn off data roaming on the home SIM so a lost phone cannot run up a bill on it.
- Keep the ETravelSim app installed. It shows every eSIM on the account and lets you buy a new plan on a replacement phone in a minute.
- Take a screenshot of the QR code and store it in a password manager, not in the camera roll.
Questions people ask
Can someone hack my eSIM remotely?
The profile download is encrypted between the provider's server and the chip in your phone, under GSMA security standards. The realistic risk is phishing aimed at you, not an attack on the chip.
Can an eSIM track my location?
No more than any SIM. Every mobile network knows roughly which tower a phone is on, because that is how calls and data are routed. ETravelSim does not receive or store that tower data. Your phone's own location services are a separate matter and are under your control in Settings.
Is it safe to buy an eSIM online with a card?
Yes. Payment on etravelsim.com is processed by Shopify Payments and the card networks; we never see or store your full card number. Look for the padlock and the etravelsim.com address before paying anywhere.
What if I scan the QR code on the wrong phone?
The profile installs on that phone and the QR is used. Contact support with your order number and we move the plan to a new QR for the right phone. This is common and takes a few minutes.
Does using an eSIM expose my home number?
No. The eSIM carries data only (or its own local number on Data + calls plans). Your home number stays on your home SIM, inside your phone, exactly as before.
Short version
An eSIM removes the two classic SIM attacks, swapping and theft, and adds no new ones. Protect your phone with a passcode, protect your account with a proper password, and buy from the provider directly.